CVE-2026-81011

A flaw was found in the Linux kernel's hp-bioscfg module. The module's package parsers incorrectly determine the number of elements in a package, using a value derived from a name string rather than the true package size. While currently prevented by existing validation, a future change to the kernel will allow shorter packages, enabling a local attacker to craft a malicious package. This could result in an out-of-bounds heap read, potentially leading to information disclosure or system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.